vulnerability
Huawei EulerOS: CVE-2017-14867: git security update
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:L/Au:S/C:C/I:C/A:C) | Sep 29, 2017 | Nov 19, 2019 | Aug 13, 2025 |
Severity
9
CVSS
(AV:N/AC:L/Au:S/C:C/I:C/A:C)
Published
Sep 29, 2017
Added
Nov 19, 2019
Modified
Aug 13, 2025
Description
Git before 2.10.5, 2.11.x before 2.11.4, 2.12.x before 2.12.5, 2.13.x before 2.13.6, and 2.14.x before 2.14.2 uses unsafe Perl scripts to support subcommands such as cvsserver, which allows attackers to execute arbitrary OS commands via shell metacharacters in a module name. The vulnerable code is reachable via git-shell even without CVS support.
Solutions
huawei-euleros-2_0_sp5-upgrade-githuawei-euleros-2_0_sp5-upgrade-git-corehuawei-euleros-2_0_sp5-upgrade-git-core-dochuawei-euleros-2_0_sp5-upgrade-perl-git
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.